• No se han encontrado resultados

2. Antecedentes de la investigación

2.1 Antecedentes internacionales

Subject to the requirements of this Certificate Policy, the EV Certificate and certificates issued to Subordinate CAs that are not controlled by the same entity as the CA MUST include the following information about the Subject organization in the fields listed:

|Relative Distinguished Name Type|Required/Optional|Contents| |–|–|–| |organizationName (OID 2.5.4.10 )| Required|This field MUST contain the Subject’s full legal organization name as listed in the official records of the Incorporating or Registration Agency in the Subject’s Jurisdiction of Incorporation or Registration or as

otherwise verified by the CA as provided herein. A CA MAY abbreviate the organization prefixes or suffixes in the organization name, e.g., if the official record shows “Company Name Incorporated” the CA MAY include “Company Name, Inc.” When abbreviating a Subject’s full legal name as allowed by this subsection, the CA MUST use abbreviations that are not misleading in the Jurisdiction of Incorporation or Registration. In addition, an assumed name or DBA name used by the Subject MAY be included at the beginning of this field, provided that it is followed by the full legal organization name in parenthesis. If the combination of names or the organization name by itself exceeds 64 characters, the CA MAY abbreviate parts of the organization name, and/or omit non-material words in the organization name in such a way that the text in this field does not exceed the 64-character limit; provided that the CA checks this field in accordance with EV Guidelines section 11.12.1 and a Relying Party will not be misled into thinking that they are dealing with a different organization. In cases where this is not possible, the CA MUST NOT issue the EV Certificate.| | commonName (OID: 2.5.4.3)|Deprecated (Discouraged, but not prohibited)|If present, this field MUST contain a single Domain Name(s) owned or controlled by the Subject and to be associated with the Subject’s server. Such server MAY be owned and operated by the Subject or another entity (e.g., a hosting service). Wildcard certificates are not allowed for EV Certificates.| |businessCategory (OID: 2.5.4.15)|Required|This field MUST contain one of the following strings: “Private Organization”, “Government Entity”, “Business Entity”, or “Non-Commercial Entity” depending upon whether the Subject qualifies under the terms of EV Guidelines Section 8.5.2, 8.5.3, 8.5.4 or 8.5.5 of this Certificate Policy, respectively.| |jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1)|Required/Optional|See jurisdictionCountryName| |

jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2)|Required/Optional|See

jurisdictionCountryName| |jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3)|Required|These fields MUST NOT contain information that is not relevant to the level of the Incorporating Agency or Registration Agency. For example, the Jurisdiction of Incorporation for an Incorporating Agency or Jurisdiction of Registration for a Registration Agency that operates at the country level MUST include the country

information but MUST NOT include the state or province or locality information. Similarly, the jurisdiction for the applicable Incorporating Agency or Registration Agency at the state or province level MUST include both country and state or province information, but MUST NOT include locality information. And, the jurisdiction for the applicable Incorporating Agency or Registration Agency at the locality level MUST include the country and state or province information, where the state or province regulates the registration of the entities at the locality level, as well as the locality information. Country information MUST be specified using the applicable ISO country code. State or province or locality information (where applicable) for the Subject’s Jurisdiction of Incorporation or Registration MUST be specified using the full name of the applicable jurisdiction| |serialNumber (OID: 2.5.4.5)|Required|For Private Organizations, this field MUST contain the Registration (or similar) Number assigned to the Subject by the Incorporating or Registration Agency in its Jurisdiction of Incorporation or Registration, as appropriate. If the Jurisdiction of Incorporation or Registration does not provide a Registration Number, then the date of Incorporation or Registration SHALL be entered into this field in any one of the common date formats. For Government Entities that do not have a Registration Number or readily verifiable date of creation, the CA SHALL enter appropriate language to indicate that the Subject is a Government Entity. For Business Entities, the Registration Number that was received by the Business Entity upon government registration SHALL be entered in this field. For those Business Entities that register with an Incorporating Agency or Registration Agency in a jurisdiction that does not issue numbers pursuant to government registration, the date of the registration SHALL be entered into this field in any one of the common date formats. |streetAddress (OID: 2.5.4.9)|Optional|This field MUST contain the address of the physical location of the Subject’s Place of Business.| |localityName ( OID: 2.5.4.7)|Required|This field MUST contain the address of the physical location of the Subject’s Place of Business.| |stateOrProvinceName (OID: 2.5.4.8)|Required where applicable|This field MUST contain the address of the physical location of the Subject’s Place of Business, if the country has principal subdivisions.| |

countryName (OID: 2.5.4.6)|Required|This field MUST contain the address of the physical location of the Subject’s Place of Business.| |postalCode (OID: 2.5.4.17)|Optional|This field MUST contain the address of the physical location of the Subject’s Place of Business.|

All other optional attributes, when present within the subject field, MUST contain information that has been verified by the CA. CAs SHALL NOT include Fully-Qualified Domain Names in Subject attributes except as specified in EV Guidelines Section 9.2.1 and SHALL NOT include any Subject Organization Information except as specified in EV Guidelines Section 9.2. Optional subfields within the Subject field MUST either contain information verified by the CA or MUST be left empty. Metadata such as ‘.’, ‘-‘, and ‘ ‘ characters, and/ or any other indication that the field is empty, absent or incomplete, MUST not be used.

Documento similar